34 lines
1.5 KiB
YAML
34 lines
1.5 KiB
YAML
---
|
|
|
|
apache2_vhost_serveradmin: webmaster@localhost
|
|
apache2_vhost_serveraliases: []
|
|
apache2_vhost_documentroot: /var/www/html
|
|
apache2_vhost_documentroot_owner: www-data
|
|
apache2_vhost_documentroot_group: www-data
|
|
apache2_vhost_loglevel: warn
|
|
apache2_vhost_errorlog: "${APACHE_LOG_DIR}/error.log"
|
|
apache2_vhost_accesslog: "${APACHE_LOG_DIR}/access.log combined"
|
|
|
|
apache2_vhost_http_enabled: true
|
|
apache2_vhost_https_enabled: true
|
|
apache2_vhost_http_redirect_to_https: true
|
|
|
|
apache2_tls_certfile: "/etc/letsencrypt/live/{{ inventory_hostname }}/fullchain.pem"
|
|
apache2_tls_keyfile: "/etc/letsencrypt/live/{{ inventory_hostname }}/privkey.pem"
|
|
apache2_tls_noacme_fallback_certfile: /etc/ssl/certs/ssl-cert-snakeoil.pem
|
|
apache2_tls_noacme_fallback_keyfile: /etc/ssl/private/ssl-cert-snakeoil.key
|
|
# generated 2024-08-10, Mozilla Guideline v5.7, Apache 2.4.61, OpenSSL 3.0.13, intermediate configuration, no OCSP
|
|
# https://ssl-config.mozilla.org/#server=apache&version=2.4.61&config=intermediate&openssl=3.0.13&ocsp=false&guideline=5.7
|
|
apache2_tls_protocols: "all -SSLv3 -TLSv1 -TLSv1.1"
|
|
apache2_tls_ciphersuite: "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305" # noqa yaml[line-length]
|
|
apache2_tls_honor_cipher_order: false
|
|
apache2_tls_session_tickets: false
|
|
|
|
apache2_module_packages: []
|
|
apache2_modules:
|
|
- ssl
|
|
- proxy_http
|
|
- headers
|
|
- rewrite
|
|
|
|
apache2_sites: {}
|